Wireshark

There is a native ARM version of Wireshark now as well. M1 & M2 Mac users need not bother with the Intel version. You'll find it at the Dev site: https://www.wireshark.org/download.html

ARM versions of Wireshark are now available. If you have an M1 series Mac, be sure to get the Wireshark macOS Arm 64-bit .dmg version! The general downloads page is here: https://www.wireshark.org/download.html

The swiss army knife of packet analyzers. Incredible.

Hey guys, was curious if there is anyone here that uses Homebrew, I had upgraded to Wireshark 3.1.0 via the cask command in brew, then they released an update that put it back to version 3.0.3, which I had initially. I was just curious why? Thanks

greatest packet analysis tool ever

Link is wrong, goes to old version. correct 2.4 version https://2.na.dl.wireshark.org/osx/Wireshark%202.4.0%20Intel%2064.dmg

Finally it has a native UI and doesn't require X11/XQuartz!

Wireshark.org suggests that users of OS X try v2.0.0rc1, first. If it doesn't work for you, then try this version.

This may possibly be of help to other new WireShark users who are having trouble getting WireShark to launch in Yosemite. Some of this has been shared before, but there is a little added twist at the end which worked for me. I made repeated attempts to use both WireShark 1.12.4 and 1.99.3, but without success. Regardless of which version I used, WireShark keep freezing up during the initialization process. In the initialization window, WireShark would get as far as "Loading module preferences", or about three quarters of the way done, and in the bottom of the window it would say "Please wait while Wireshark is initializing..."; and then freeze-up. So I conducted some quick research on the web and discovered that I had to enter "sudo ln -s /opt/X11 /usr/X11" in the Terminal in order to restore a link an X11 link that Yosemite breaks. However, even that did not help. Next, I reinstalled XQuartz 2.7.7. Again, that didn't help either. Then I came across an online comment where someone stated that they typed "sudo wireshark" in the Terminal. Guess what? I don't know why, but it worked. The Terminal spit out the following, and then WireShark launched on my desktop: void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting void QCocoaMenu::insertNative(QCocoaMenuItem *, QCocoaMenuItem *) Menu item is already in a menu, remove it from the other menu first before inserting 22:01:58 Dbg plugin_dir: /Applications/Wireshark.app/Contents/PlugIns/wireshark Now I can click WireShark's icon in the Dock, and it appears to be working fine.

Wireshark on Yosemite To get Wireshark working on Yosemite you will need to install X11 which may be found at: http://xquartz.macosforge.org/landing/ and then make the following link: $ sudo ln -s /opt/X11 /usr/X11

Wireshark 1.12.3 was released on 1-7-15

Wireshark 1.12.1 is available fixing several security issues with DoS vulnerabilities in some of their parsers or dissectors. Enjoy.

Just for the record, when you start WireShark (1.9.2) in Mountain Lion, it offers to install an X11 system. If you say yes, it takes you to an Apple Support page which contains a link to the XQuartz project. You have to download and install it. Note that it gets installed in the Utilities folder inside the Applications folder. When you start WireShark, it asks you to find X11. Navigate to Utilities folder and select XQuartz. WireShark now freezes for a couple of minutes while it builds font caches - DON'T PANIC! Then the window appears.

Beware. Apple is REMOVING X11 in Mac OS X 10.8 Mountain Lion. Not an optional install. It's *GONE*! In a few months, Wireshark will be unusable on up-to-date Macs.

I just downloaded it for a networking class. On their site the version is 1.6.8, here it's 1.6.7. Please update as I depend on Macupdate for the most recent versions. Thanks

No longer supports 10.6.5 :-(

This program has been very useful in troubleshooting tracking and analytics. Using the GA debugger only helps for chrome, using this we can see the call any browser makes or even a connected iPad or iPhone!

After trying for a hundred times, I still have problems installing this program. Any workaround for Lion, or is it not supported?

I used to run WireShark in windows, now this version has even better functionalities in Mac. Works great, I like it.

Gotta love wireshark